Check available, not yet exploited

Every one of the 39 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Eclipse Jetty - Information DisclosureCVE-2021-34429The Eclipse Foundation · CVSS 5.3 · 99% likely

   CWE-200Eclipse Foundation

2. Elasticsearch 7.10.0-7.13.3 - Information DisclosureCVE-2021-22145Elastic · 76% likely

   CWE-200Elastic

3. Kramer VIAware - Privilege Escalation and Remote Code ExecutionCVE-2021-35064Kramerav · 71% likely

   CWE-269Kramerav

4. WordPress ProfilePress 3.0.0-3.1.3 - Admin User Creation WeaknessCVE-2021-34621ProfilePress · CVSS 9.8 · 69% likely

   CWE-269Profilepress

5. PowerDNS Authoritative Server - Denial of ServiceCVE-2021-36754Powerdns · 65% likely

   CWE-119PowerDNS

6. EVlink City < R8 V3.4.0.1 - Authentication BypassCVE-2021-22707Schneider-Electric · 65% likely

   CWE-798Schneider Electric

7. Kaseya VSA < 9.5.7 - Arbitrary File Upload to Remote Code ExecutionCVE-2021-30118Kaseya · CVSS 9.8 · 60% likely

   CWE-434Kaseya

8. Advantech R-SeeNet - Cross-Site ScriptingCVE-2021-21801Advantech · CVSS 9.6 · 59% likely

   CWE-79Advantech

9. CommScope Ruckus IoT Controller - Information DisclosureCVE-2021-33221Commscope · 56% likely

   CWE-306Commscope

10. Wordpress Polls Widget < 1.5.3 - SQL InjectionCVE-2021-24442wpdevart · 46% likely

    CWE-89Wpdevart

11. D-Link DIR-3040 1.13B03 - Information DisclosureCVE-2021-21816Dlink · CVSS 6.5 · 32% likely

    CWE-200D-Link

12. WooCommerce Blocks 2.5 to 5.5 - Unauthenticated SQL InjectionCVE-2021-32789woocommerce · CVSS 7.5 · 17% likely

    CWE-89WooCommerce

13. Cartadis Gespage 8.2.1 - Directory TraversalCVE-2021-33807Gespage · 16% likely

    CWE-22

14. Import XML & RSS Feeds WordPress Plugin <= 2.0.1 Server-Side Request ForgeryCVE-2020-24148Mooveagency · 14% likely

    CWE-918Mooveagency

15. Advantech R-SeeNet 2.4.12 - Cross-Site ScriptingCVE-2021-21800Advantech · CVSS 9.6 · 14% likely

    CWE-79Advantech

16. Advantech R-SeeNet 2.4.12 - Cross-Site ScriptingCVE-2021-21799Advantech · CVSS 9.6 · 12% likely

    CWE-79Advantech

17. Tieline IP Audio Gateway <=2.6.4.8 - Unauthorized Remote Admin Panel AccessCVE-2021-35336Tieline · 10% likely

    CWE-1188

18. Advantech R-SeeNet - Cross-Site ScriptingCVE-2021-21802Advantech · CVSS 9.6 · 9.9% likely

    CWE-79Advantech

19. Advantech R-SeeNet - Cross-Site ScriptingCVE-2021-21803Advantech · CVSS 9.6 · 7.9% likely

    CWE-79Advantech

20. WordPress ProfilePress 3.0-3.1.3 - Arbitrary File UploadCVE-2021-34624ProfilePress · CVSS 9.8 · 7.8% likely

    CWE-434Profilepress

21. Akkadian Provisioning Manager 4.50.02 - Sensitive Information DisclosureCVE-2020-27361Akkadianlabs · 6.8% likely

    CWE-668

22. TCExam <= 14.8.1 - Sensitive Information ExposureCVE-2021-20114Tecnick · 6.0% likely

    CWE-425Tecnick

23. WordPress ProfilePress <= 3.1.3 - Privilege EscalationCVE-2021-34622ProfilePress · CVSS 9.8 · 4.9% likely

    CWE-269Profilepress

24. Event Espresso Core-Reg 4.10.7.p - Cross-Site ScriptingCVE-2020-26153Eventespresso · 4.4% likely

    CWE-79Event Espresso

25. WordPress FoodBakery <2.2 - Cross-Site ScriptingCVE-2021-24389Chimpstudio · 3.8% likely

    CWE-79Chimpstudio

26. WordPress Pro Real Estate 7 Theme <3.1.1 - Cross-Site ScriptingCVE-2021-24387Contempoinc · 3.7% likely

    CWE-79Contempoinc

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.